Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft
File:                     xP8jscNxNS85tz05pOB_jKmMzWc.mft (raw, json)
Hash identifier:          T1O5vI1pmQcQU9DehzEWOfl9y7QhyR0sUTFfqQBnbVY=
Subject key identifier:   17:62:14:06:94:46:9D:FA:66:16:D0:97:C4:C4:48:9C:C6:75:3D:A5
Authority key identifier: C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67
Certificate issuer:       /CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67
Certificate serial:       01A0E098B4C947F746CEBFDDBA70AB415AD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft
Manifest number:          1907
Signing time:             Sun 27 Sep 2026 02:01:39 +0000
Manifest this update:     Sun 27 Sep 2026 02:01:39 +0000
Manifest next update:     Mon 28 Sep 2026 02:01:39 +0000
Files and hashes:         1: 0dcnrV30Gn7pa5jEvj5KgP9qiO0.roa (hash: A5Y7w1IBePH5KEnAB3b2HcWOuDVZjoYUDuccSlddMpw=)
                          2: 5MxSZvQXl_H2-veNhxP8C7tXJSw.roa (hash: lKmWvBuQPVEzVHQHwfilpfDCux8I/gMUbPsFOeqhDzc=)
                          3: XA8IG6QRQrLsbNV64R-2HjyZbEg.roa (hash: MAJTuBGRkQWXta5nAROoMjVqytepn5bG0MlABDfwKjU=)
                          4: dZHf2iv05pM1Ai9ZjfS07lKZDts.roa (hash: JTU5yNETth/ASXwQ5ks41TuKzhbLmsaZI7F7bPnX1jA=)
                          5: kReZeiKYeK227CwdOt2peWbzn6o.roa (hash: vijDgPLigLiF+q+U/7SVmc/WWIgze2Hy8w525GeqVG8=)
                          6: mVQ9FPpVueUhksm65G9KzIV5UC8.roa (hash: aeiYkQy+Q1DkLgKvsKV+KpeuzrUpSXnXOD5PPgZsPjM=)
                          7: x2-bHgYNNe9EO0e71Kbdkn4WCUs.roa (hash: Dca0K3UX+EGLfg7iHsshpljIoglUEEQdeXIYfckXkFA=)
                          8: xP8jscNxNS85tz05pOB_jKmMzWc.crl (hash: jN3YXw8F6ILhumipcSr1cDQbJ6i7GOQEYFDzA74zPI0=)
                          9: yCcfya-jB3S-Fhloi_JZSoWRN1w.roa (hash: 8VHySyEqz9LaoooRkHWLcdlgezRWIk8QkynQdc9lQz8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 02:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e0:98:b4:c9:47:f7:46:ce:bf:dd:ba:70:ab:41:5a:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67
        Validity
            Not Before: Sep 27 02:01:39 2026 GMT
            Not After : Sep 28 02:01:39 2026 GMT
        Subject: CN=1762140694469dfa6616d097c4c4489cc6753da5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6f:fc:f5:41:40:ac:65:57:db:89:cb:a0:c6:
                    e3:43:99:3e:fe:25:ea:45:75:81:50:5c:0d:a0:cf:
                    4c:fd:24:32:79:9b:72:22:4d:ff:80:33:c7:6d:62:
                    27:ab:18:0a:0c:41:4f:3e:75:85:f6:90:ce:86:9c:
                    08:c7:f9:13:e5:b5:5e:82:2c:f2:0b:cd:a9:d6:9e:
                    cd:7f:88:19:77:34:cb:30:83:f2:d6:d2:24:dd:27:
                    53:48:c5:a8:00:0c:89:1c:b2:b7:e6:03:b4:45:4a:
                    11:05:29:18:8d:78:45:40:a6:9c:07:2c:f9:55:7a:
                    03:46:7a:40:5b:f4:9b:a4:f4:2e:23:1b:2c:ad:5c:
                    be:a7:6f:74:24:7e:bc:db:2d:63:c3:e4:65:4e:47:
                    d3:ff:84:9a:7a:69:f8:34:f0:16:05:8c:c2:5a:eb:
                    cb:8c:ef:16:13:2e:59:de:4f:89:59:8f:a7:e6:2a:
                    83:7c:aa:c3:84:2d:8c:cb:f3:26:12:14:60:ef:f1:
                    89:55:25:f1:cb:56:28:6f:68:23:f4:2d:ba:02:6e:
                    6b:e4:25:4b:8c:42:cb:10:de:d2:fa:97:98:db:67:
                    07:92:27:e7:5d:e4:2b:45:41:63:13:01:0c:8f:ef:
                    c6:0c:98:b5:4b:d2:80:11:38:42:eb:ff:44:65:d7:
                    48:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:62:14:06:94:46:9D:FA:66:16:D0:97:C4:C4:48:9C:C6:75:3D:A5
            X509v3 Authority Key Identifier:
                keyid:C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:ed:d9:12:06:c3:d3:1e:93:6d:9c:ab:a2:20:c8:f5:a2:c0:
         5e:f9:ba:98:6c:65:ef:4f:eb:6d:11:5c:37:a3:00:7e:d4:c5:
         cc:bd:f8:63:76:2c:89:5e:a9:28:61:f0:c8:d2:82:17:2f:33:
         a6:ad:38:a1:73:97:50:de:50:dc:fe:18:ad:27:16:59:c9:af:
         b0:e1:8b:22:bc:0c:41:68:fe:00:de:f0:e3:0a:5f:ec:ba:fd:
         c8:83:d2:c6:71:6d:9a:3b:0d:04:73:72:a8:88:02:29:e0:9d:
         93:7d:0f:f6:5f:0b:72:69:61:64:74:fc:99:97:21:6b:9a:92:
         39:9f:c9:57:58:43:76:38:b3:9f:bc:8d:bc:86:df:da:2a:b9:
         a3:2b:52:55:a4:97:eb:1e:dd:5f:d9:9c:32:3f:11:f7:e0:eb:
         ad:80:84:c6:53:35:90:8f:ed:5a:e5:b5:79:c3:b1:d2:a4:3b:
         0d:cc:a6:b8:2c:31:96:8c:1c:5b:11:a0:d9:37:5d:60:e3:44:
         6e:3e:ea:70:e1:b9:f4:13:85:3a:da:33:a6:fa:a1:a5:7e:98:
         d6:f0:6e:10:3f:dd:ca:0d:0b:82:75:94:cb:fb:be:ac:01:ec:
         86:61:b2:52:9d:80:26:c5:37:e0:5a:91:22:02:eb:1c:14:99:
         52:9b:46:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:17:40 2026 by rpki-client